119.28.28.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS132203 Tencent RPKI valid 40 37721132203 2026-09-18 2026-10-15
AS45090 Tencent Cloud RPKI valid 2 557202376441345846645090 2026-10-01 2026-10-15

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
119.28.28.0/24 /24 AS45090 apnic wrong origin
119.28.28.0/24 /24 AS132203 apnic authorises it
119.28.28.0/23 /23 AS132203 apnic too specific
119.28.0.0/18 /18 AS132203 apnic too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
119.28.0.0/15
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2007-12-12

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
119.28.28.0/23 v4 AS132203 Tencent RPKI valid 42 17639132203 2026-09-18
119.28.0.0/18 v4 AS132203 Tencent RPKI valid 43 17639132203 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-15 19:46:33Z origin change AS45090 → AS132203 49432483621299132203
2026-10-15 17:57:03Z origin change AS132203 → AS45090 557202376441345846645090
2026-10-08 17:55:53Z origin change AS45090 → AS132203 612186939132203
2026-10-08 17:07:54Z origin change AS132203 → AS45090 557202376441345846645090
2026-10-08 11:02:07Z origin change AS45090 → AS132203 35493356132203
2026-10-07 17:57:48Z origin change AS132203 → AS45090 557202376441345846645090
2026-10-02 19:03:59Z origin change AS45090 → AS132203 2040923401933033356132203
2026-10-02 19:03:45Z origin change AS132203 → AS45090 573814270841345846645090